Senior DFIR Analyst: Incident Response & Forensics

MartinFed; Washington (District of Columbia); On-site; USD 100,000 - 130,000; Full time

Job summary

MartinFed is seeking a Digital Forensics & Incident Analyst to support the Threat Analysis & Investigations function. The role provides Tier 2/3 support to the enterprise Security Operations Center, aligns with the NICE Framework, and handles evidence collection and analysis for authorized investigations.

The ideal candidate has 7+ years in DFIR, strong knowledge of Windows/Unix/Linux, and experience with forensic tools such as EnCase, FTK, and Wireshark. U.S.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Digital Forensics, Information Systems, or related field.
• 7+ years hands-on DFIR experience in federal or regulated environments.
• U.S. citizenship and an active Top Secret security clearance.

Responsibilities

• Analyze log files, evidence, and other information to determine the perpetrator of a network intrusion.
• Perform file signature analysis and file system forensic analysis across NTFS, FAT, EXT.
• Provide technical summaries of findings and deliver written analysis reports to customers.
• Conduct malware analysis and interpret results to identify adversary techniques.
• Maintain chain of custody and assist with admissibility of evidence under applicable laws.

Skills

Digital forensics

Incident response

Technical writing

Legal/regulatory knowledge

Education

Bachelor's degree in Cybersecurity/CS/Forensics/IS

Tools

EnCase

FTK

Autopsy/The Sleuth Kit

X-Ways

Wireshark

YARA

Ghidra/IDA Pro

Job description

MartinFed is seeking a Digital Forensics & Incident Analyst to support the Threat Analysis & Investigations function. The role provides Tier 2/3 support to the enterprise Security Operations Center, aligns with the NICE Framework, and handles evidence collection and analysis for authorized investigations.

The ideal candidate has 7+ years in DFIR, strong knowledge of Windows/Unix/Linux, and experience with forensic tools such as EnCase, FTK, and Wireshark. U.S.